Opt-in to enforce RSA key length

2026-07-15 08:37:48 +02:00 · 2017-03-04 14:21:58 +01:00
parent 66c954ed66
commit 6b23b28f52
2 changed files with 34 additions and 17 deletions
@@ -191,6 +191,8 @@ openssh:

  generate_rsa_keys: False
  generate_rsa_size: 4096
+  # Will remove the old key if it is to short and generate a new one.
+  enforce_rsa_size: False
  absent_rsa_keys: False
  provide_rsa_keys: False
  rsa: